https://www.hackingarticles.in/digital-forensics-investigation-os-forensics-part-3/
Digital Forensics Investigation through OS Forensics (Part 3)